I've applied a change to HEAD which should improve interoperability with MS AD. Please test. Thanks, Kurt